AM
Product
AutoCAD MAP 3D
136
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 4High 128Medium 2Low 1
Watch
Add AutoCAD MAP 3D to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-7406 | 7.8 | Aug 6 | BMP File Parsing Untrusted Pointer Dereference in certain Autodesk products Affected: 2027 before 2027.1 |
| CVE-2026-16463 | 7.8 | Jul 29 | DXF File Parsing Heap-Based Overflow in Autodesk AutoCAD Affected: 2026 before 2026.1.2; 2027 |
| CVE-2025-8894 | 7.8 | Sep 16 | PDF File Parsing Heap-Based Buffer Overflow Vulnerability Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8 |
| CVE-2025-8893 | 7.8 | Sep 16 | PDF File Parsing Out-of-Bounds Write Vulnerability Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8 |
| CVE-2025-5048 | 7.8 | Aug 15 | DGN File Parsing Memory Corruption Vulnerability Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8 |
| CVE-2025-5047 | 7.8 | Aug 15 | DGN File Parsing Uninitialized Variable Vulnerability Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8 |
| CVE-2025-5046 | 7.8 | Aug 15 | DGN File Parsing Out-of-Bounds Read Vulnerability Affected: 2026 before 2026.1; 2025 before 2025.1.3; 2024 before 2024.1.8; 2023 before 2023.1.8 |
| CVE-2025-1276 | 7.8 | Apr 15 | A maliciously crafted DWG file, when parsed through certain Autodesk applications, can force an Out-of-Bounds Write vulnerability Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1275 | 7.8 | Apr 15 | A maliciously crafted JPG file, when linked or imported into certain Autodesk applications, can force a Heap-Based Overflow vulnerability Affected: 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1652 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1651 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1650 | 7.8 | Mar 13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1649 | 7.8 | Mar 13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1433 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1432 | 7.8 | Mar 13 | A maliciously crafted 3DM file, when parsed through Autodesk AutoCAD, can force a Use-After-Free vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1431 | 7.8 | Mar 13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1430 | 7.8 | Mar 13 | A maliciously crafted SLDPRT file, when parsed through Autodesk AutoCAD, can force a Memory Corruption vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1429 | 7.8 | Mar 13 | A maliciously crafted MODEL file, when parsed through Autodesk AutoCAD, can force a Heap-Based Overflow vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1428 | 7.8 | Mar 13 | A maliciously crafted CATPART file, when parsed through Autodesk AutoCAD, can force an Out-of-Bounds Read vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2025-1427 | 7.8 | Mar 13 | A maliciously crafted CATPRODUCT file, when parsed through Autodesk AutoCAD, can force an Uninitialized Variable vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.7; 2025 before 2025.1.2 |
| CVE-2024-7305 | 7.8 | Aug 20 | A maliciously crafted DWF file, when parsed in AdDwfPdk.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.6; 2023 before 2023.1.7; 2024 before 2024.1.6; 2025 before 2025.1 |
| CVE-2024-37007 | 7.8 | Jun 25 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through Autodesk applications, can cause a use-after-free vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-37006 | 7.8 | Jun 25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37005 | 7.8 | Jun 25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-37004 | 7.8 | Jun 25 | A maliciously crafted SLDPRT file, when parsed in ASMKERN229A.dll through Autodesk applications, can cause a use-after-free vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37003 | 7.8 | Jun 25 | A maliciously crafted DWG and SLDPRT file, when parsed in opennurbs.dll and ODXSW_DLL.dll through Autodesk applications, can be used to cause a Stack-based Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-36999 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Write Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23159 | 7.8 | Jun 25 | A maliciously crafted STP file, when parsed in stp_aim_x64_vc15d.dll through Autodesk applications, can be used to uninitialized variables Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23158 | 7.8 | Jun 25 | A maliciously crafted IGES file, when parsed in ASMImport229A.dll through Autodesk applications, can be used to cause a use-after-free vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23157 | 7.8 | Jun 25 | A maliciously crafted SLDASM or SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23156 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll and ASMkern229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23155 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in atf_asm_interface.dll through Autodesk applications, can be used to cause a Heap-based Buffer Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23154 | 7.8 | Jun 25 | A maliciously crafted SLDPRT file, when parsed in ODXSW_DLL.dll through Autodesk applications, can be used to cause a Heap-based Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23153 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in libodx.dll through Autodesk applications, can force an Out-of-Bounds Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23152 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bounds Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23151 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in ASMkern229A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-23150 | 7.8 | Jun 25 | A maliciously crafted PRT file, when parsed in odxug_dll.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.5; 2025 before 2025.1 |
| CVE-2024-37002 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in ASMkern229A.dllthrough Autodesk applications, can be used to uninitialized variables Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37001 | 7.8 | Jun 25 | A maliciously crafted 3DM file, when parsed in opennurbs.dll through Autodesk applications, can be used to cause a Heap-based Overflow Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-37000 | 7.8 | Jun 25 | A maliciously crafted X_B file, when parsed in pskernel.DLL through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23149 | 7.8 | Jun 25 | A maliciously crafted SLDDRW file, when parsed in ODXSW_DLL.dll through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23148 | 7.8 | Jun 25 | A maliciously crafted CATPRODUCT file, when parsed in CC5Dll.dll through Autodesk applications, can lead to a memory corruption vulnerability by write access violation Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23147 | 7.8 | Jun 25 | A maliciously crafted CATPART, X_B and STEP, when parsed in ASMKERN228A.dll and ASMKERN229A.dll through Autodesk applications, can lead to a memory corruption vulnerability by… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23146 | 7.8 | Jun 25 | A maliciously crafted X_B and X_T file, when parsed in pskernel.DLL through through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23145 | 7.8 | Jun 25 | A maliciously crafted PRT file, when parsed in opennurbs.dll through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23144 | 7.8 | Jun 25 | A maliciously crafted CATPART file, when parsed in CC5Dll.dll and ASMBASE228A.dll through Autodesk AutoCAD, may force an Out-of-Bounds Write vulnerability Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23143 | 7.8 | Jun 25 | A maliciously crafted 3DM, MODEL and X_B file, when parsed in ASMkern229A.dll and ASMBASE229A.dll through Autodesk applications, can force an Out-of-Bound Read and/or Out-of-Bound… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23142 | 7.8 | Jun 25 | A maliciously crafted CATPART, STP, and MODEL file, when parsed in atf_dwg_consumer.dll, rose_x64_vc15.dll and libodxdll through Autodesk applications, can cause a use-after-free… Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23141 | 7.8 | Jun 25 | A maliciously crafted MODEL file, when parsed in libodxdll through Autodesk applications, can cause a double free Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
| CVE-2024-23140 | 7.8 | Jun 25 | A maliciously crafted 3DM and MODEL file, when parsed in opennurbs.dll and atf_api.dll through Autodesk applications, can force an Out-of-Bound Read Affected: 2022 before 2022.1.5; 2023 before 2023.1.6; 2024 before 2024.1.4; 2025 before 2025.1 |
